CVE search · CVE-2026-104030
CVE-2026-104030
medium 5.5
A flaw was found in sssd. This vulnerability allows a local user to cause a Denial of Service (DoS) by submitting a specially crafted passkey authentication token that lacks null terminators. The authentication service reads past the end of the provided memory buffer, causing the process to crash and disrupting authentication services.
Details
- Status
- Analyzed
- Published
- Last changed
- Source
- secalert@redhat.com
- Weakness
- CWE-125
Severity
| Version | Score | Vector | Source |
|---|---|---|---|
| CVSS 3.1 | medium 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
secalert@redhat.comSecondary |
Affected products
Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.
- fedoraproject · sssd
- redhat · openshift_container_platform
- redhat · enterprise_linux
References
- https://access.redhat.com/security/cve/CVE-2026-104030Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2479429ExploitIssue TrackingVendor Advisory